ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

Malicious code in ca-bucky-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ee4afc99c3034156d15adbc02cd1378995ce9c095545e9d6bbd8465f8d666cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1755 Malicious code in ca-bucky-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ee4afc99c3034156d15adbc02cd1378995ce9c095545e9d6bbd8465f8d666cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

Exploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway

CVE-2022-1292 POC !POC Screenshothttps://user-images.github...

Masky - Python Library With CLI Allowing To Remotely Dump Domain User Credentials Via An ADCS Without Dumping The LSASS Process Memory

Masky is a python library providing an alternative way to remotely dump domain users' credentials thanks to an ADCS. A command line tool has been built on top of this library in order to easily gather PFX, NT hashes and TGT on a larger scope. This tool does not exploit any new vulnerability and...

Ubuntu: Security Advisory (USN-4377-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5473-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5089-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

k963.ca Cross Site Scripting vulnerability OBB-2853039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for OS Command Injection in Sap Introscope_Enterprise_Manager

CVE-2020-6364 Remote code execution in CA APM Team Center Wil...

wishart.web.sd62.bc.ca Cross Site Scripting vulnerability OBB-2851935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ca-reservoir-status (1.0.0) potentially affected by CVE-2020-28425 via curljs (0.1.2)

curljs NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on curljs and may be impacted: - ca-reservoir-status 1.0.0 Source cves: CVE-2020-28425 Source advisory: OSV:GHSA-CQFC-9452-R36J...

UBUNTU-CVE-2021-3601

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes:...

CVE-2021-3601

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes:...

CVE-2021-3601

CVE-2021-3601 is rejected/not used; this CVE entry is not a security vulnerability per the description.

CVE-2021-3601

Removed by vendor...

USN-5473-1: ca-certificates update | Cloud Foundry

usn-5473-1 Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.50 version of the Mozilla certificate authority...

SUSE: Security Advisory (SUSE-SU-2022:2536-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

energy106.ca Cross Site Scripting vulnerability OBB-2813969

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...